$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: k5dS+/Y1ad5KXahkTohWmuE5wAKva3YdMsWmQdZxiFQ= Subject key identifier: 34:BC:DE:42:45:DD:BD:AE:A3:CD:7C:CC:1E:83:19:DB:FE:C3:CF:77 Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 5951B398247C384112E38085AE8DDA8EC62C189E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: A1 Signing time: Sun 19 Oct 2025 12:11:57 +0000 Manifest this update: Sun 19 Oct 2025 12:06:57 +0000 Manifest next update: Wed 22 Oct 2025 12:43:57 +0000 Files and hashes: 1: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: c8HzWrKr82X2eDJoH6CZZZdgcDJWKcqQzLKHMGCux8w=) 2: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: ioN63y/a6zMhso1bZx+bq+twKG/bpFqGK3I7L7XEk5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:51:b3:98:24:7c:38:41:12:e3:80:85:ae:8d:da:8e:c6:2c:18:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Oct 19 12:06:57 2025 GMT Not After : Oct 22 12:43:57 2025 GMT Subject: CN=34BCDE4245DDBDAEA3CD7CCC1E8319DBFEC3CF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:60:88:ab:89:e7:1b:7c:75:64:0b:3a:1a:53: f0:cd:a8:ff:ed:9a:64:64:04:99:df:7f:0e:7f:58: fc:ce:f0:9d:42:9d:20:9c:5d:88:16:cf:d2:ab:13: 28:0a:03:b9:fb:2f:82:6d:62:7c:88:49:d6:97:84: bf:92:69:0c:c9:0e:b2:86:40:83:e3:cf:20:6f:f2: 6f:93:cb:29:4b:d9:c0:78:06:26:6f:8a:ce:bc:e2: c1:70:4d:db:e9:61:70:0e:bd:8f:6b:4c:22:ad:81: c2:47:ba:bb:b9:c5:c4:d9:10:17:c0:f0:2a:e3:75: 45:1f:69:79:6c:16:78:d8:61:d9:91:40:ad:a6:bb: 02:be:98:19:c1:4b:7d:54:58:00:2c:9b:40:a7:3a: b9:1f:51:42:f2:ec:50:7c:45:3e:fc:f3:19:68:b3: 4e:5f:07:95:3d:56:f7:71:0d:c9:f1:b7:46:93:6f: c0:79:ec:17:ee:c4:78:55:27:e6:cd:17:f0:c2:56: 77:67:ce:0f:2c:e2:21:0d:64:18:de:fe:75:9c:ee: a3:a9:e3:b4:9a:8e:85:e3:95:9b:1f:fe:82:b9:07: d3:10:43:ae:2b:d4:9f:1e:41:82:0a:f0:65:c8:bf: c4:4c:52:3f:3c:e1:11:22:b7:d6:ee:be:fd:39:3b: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BC:DE:42:45:DD:BD:AE:A3:CD:7C:CC:1E:83:19:DB:FE:C3:CF:77 X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:90:76:62:75:0e:35:fa:d7:03:96:82:ac:d8:96:67:9c:2f: 1c:fd:a2:65:fc:d9:0e:0e:7c:2c:bc:7a:7d:2b:88:fa:81:ae: 8d:04:b2:f6:8b:fd:3e:4d:ee:8a:f6:71:f1:a5:45:d6:fa:2c: 09:74:80:d7:e5:df:60:ea:44:eb:66:7d:55:27:3f:9d:30:6d: 71:a1:fd:bd:b9:f2:3b:c1:48:a2:f8:3e:12:f2:42:4e:ff:2b: fb:11:07:ab:79:05:63:49:fe:0c:80:9e:fe:48:6c:10:61:10: 43:28:46:38:7a:df:32:f1:0d:97:d9:de:9f:03:bb:d0:54:37: 54:06:dd:7e:40:4e:82:5c:4f:5f:56:91:b2:11:f4:cf:18:29: 33:7a:ad:0b:bd:d1:49:0a:7c:5d:52:8a:ab:f0:ab:43:f3:f7: 5a:8b:42:01:cc:4a:c7:e5:13:eb:91:cb:42:23:9e:1e:94:e4: cc:40:d6:31:8b:cc:e7:16:6b:d2:59:64:30:3c:e3:75:8f:c7: 73:e2:c4:a0:73:37:a5:5e:d8:2d:7b:29:4d:79:f8:f1:b0:55: d1:cf:54:43:5e:17:ea:8a:73:12:48:65:c2:a7:09:41:d5:0b: c6:4d:a7:3a:7a:5e:67:33:e9:7c:ba:af:6c:df:c2:90:6b:1d: 49:21:72:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVGzmCR8OEES44CFro3ajsYsGJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTEwMTkxMjA2NTdaFw0yNTEwMjIxMjQzNTdaMDMxMTAvBgNV BAMTKDM0QkNERTQyNDVEREJEQUVBM0NEN0NDQzFFODMxOURCRkVDM0NGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYIiriecbfHVkCzoaU/DNqP/t mmRkBJnffw5/WPzO8J1CnSCcXYgWz9KrEygKA7n7L4JtYnyISdaXhL+SaQzJDrKG QIPjzyBv8m+TyylL2cB4BiZvis684sFwTdvpYXAOvY9rTCKtgcJHuru5xcTZEBfA 8CrjdUUfaXlsFnjYYdmRQK2muwK+mBnBS31UWAAsm0CnOrkfUULy7FB8RT788xlo s05fB5U9VvdxDcnxt0aTb8B57BfuxHhVJ+bNF/DCVndnzg8s4iENZBje/nWc7qOp 47SajoXjlZsf/oK5B9MQQ64r1J8eQYIK8GXIv8RMUj884REit9buvv05O1qnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLzeQkXdva6jzXzMHoMZ2/7Dz3cwHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2QdmJ1DjX61wOWgqzYlmecLxz9omX82Q4O fCy8en0riPqBro0EsvaL/T5N7or2cfGlRdb6LAl0gNfl32DqROtmfVUnP50wbXGh /b258jvBSKL4PhLyQk7/K/sRB6t5BWNJ/gyAnv5IbBBhEEMoRjh63zLxDZfZ3p8D u9BUN1QG3X5AToJcT19WkbIR9M8YKTN6rQu90UkKfF1Siqvwq0Pz91qLQgHMSsfl E+uRy0Ijnh6U5MxA1jGLzOcWa9JZZDA843WPx3PixKBzN6Ve2C17KU15+PGwVdHP VENeF+qKcxJIZcKnCUHVC8ZNpzp6Xmcz6Xy6r2zfwpBrHUkhcgc= -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:51 2025 by rpki-client